CVE-2017-12151
Fixed in a distro release EPSS 4%CVSS 7.4
A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and encrypting to any DFS redirects, allowing an attacker to read or alter the contents of the connection via a man-in-the-middle attack.
Products: Samba
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | samba | 4.7.0-r0 |
| Alpine 3.11 | samba | 4.7.0-r0 |
| Alpine 3.12 | samba | 4.7.0-r0 |
| Alpine 3.13 | samba | 4.7.0-r0 |
| Alpine 3.14 | samba | 4.7.0-r0 |
| Alpine 3.15 | samba | 4.7.0-r0 |
| Alpine 3.16 | samba | 4.7.0-r0 |
| Alpine 3.17 | samba | 4.7.0-r0 |
| Alpine 3.18 | samba | 4.7.0-r0 |
| Alpine 3.19 | samba | 4.7.0-r0 |
| Alpine 3.20 | samba | 4.7.0-r0 |
| Alpine 3.21 | samba | 4.7.0-r0 |
| Alpine 3.22 | samba | 4.7.0-r0 |
| Alpine 3.23 | samba | 4.7.0-r0 |
| Alpine 3.24 | samba | 4.7.0-r0 |
| Alpine 3.4 | samba | 4.4.16-r0 |
| Alpine 3.5 | samba | 4.5.14-r0 |
| Alpine 3.6 | samba | 4.6.8-r0 |
| Alpine 3.7 | samba | 4.7.0-r0 |
| Alpine 3.8 | samba | 4.7.0-r0 |
| Alpine 3.9 | samba | 4.7.0-r0 |
| Debian 12 | samba | 2:4.6.7+dfsg-2 |
| Debian 13 | samba | 2:4.6.7+dfsg-2 |
| Debian 14 | samba | 2:4.6.7+dfsg-2 |
| Debian 8 | samba | 2:4.2.14+dfsg-0+deb8u8 |
| Debian 9 | samba | 2:4.5.8+dfsg-2+deb9u2 |
| Red Hat Enterprise Linux 7 | ctdb | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | ctdb-tests | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | libsmbclient | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | libsmbclient-devel | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | libwbclient | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | libwbclient-devel | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-client | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-client-libs | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-common | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-common-libs | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-common-tools | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-dc | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-dc-libs | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-debuginfo | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-devel | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-krb5-printing | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-libs | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-pidl | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-python | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-test | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-test-libs | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-vfs-glusterfs | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-winbind | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-winbind-clients | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-winbind-krb5-locator | 0:4.6.2-11.el7_4 |
| Red Hat Enterprise Linux 7 | samba-winbind-modules | 0:4.6.2-11.el7_4 |
| Red Hat storage 3.3 samba el6 | ctdb | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | ctdb-tests | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | libsmbclient | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | libsmbclient-devel | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | libwbclient | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | libwbclient-devel | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-client | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-client-libs | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-common | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-common-libs | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-common-tools | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-dc | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-dc-libs | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-debuginfo | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-devel | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-krb5-printing | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-libs | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-pidl | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-python | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-test | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-test-libs | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-vfs-glusterfs | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-winbind | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-winbind-clients | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-winbind-krb5-locator | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el6 | samba-winbind-modules | 0:4.6.3-6.el6rhs |
| Red Hat storage 3.3 samba el7 | ctdb | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | ctdb-tests | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | libsmbclient | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | libsmbclient-devel | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | libwbclient | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | libwbclient-devel | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-client | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-client-libs | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-common | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-common-libs | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-common-tools | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-dc | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-dc-libs | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-debuginfo | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-devel | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-krb5-printing | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-libs | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-pidl | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-python | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-test | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-test-libs | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-vfs-glusterfs | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-winbind | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-winbind-clients | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-winbind-krb5-locator | 0:4.6.3-6.el7rhgs |
| Red Hat storage 3.3 samba el7 | samba-winbind-modules | 0:4.6.3-6.el7rhgs |
| SUSE Enterprise Storage 5 | samba | 4.6.9+git.59.c2cff9cea4c-3.17.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | samba | 4.4.2-38.11.2 |
| SUSE Linux Enterprise Desktop 12 SP2 | samba | 4.2.4-28.21.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | samba | 4.6.9+git.59.c2cff9cea4c-3.17.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | samba | 4.6.7+git.51.327af8d0a11-3.12.1 |
| SUSE Linux Enterprise High Availability Extension 12 | samba | 4.2.4-18.44.2 |
| SUSE Linux Enterprise High Availability Extension 12 SP2 | samba | 4.4.2-38.11.2 |
| SUSE Linux Enterprise High Availability Extension 12 SP3 | samba | 4.6.9+git.59.c2cff9cea4c-3.17.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP3 | samba | 4.6.7+git.51.327af8d0a11-3.12.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | samba | 4.2.4-28.19.3 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | samba | 4.2.4-28.21.1 |
| SUSE Linux Enterprise Server 12 SP2 | samba | 4.4.2-38.11.2 |
| SUSE Linux Enterprise Server 12 SP2 | samba | 4.2.4-28.21.1 |
| SUSE Linux Enterprise Server 12 SP3 | samba | 4.6.9+git.59.c2cff9cea4c-3.17.1 |
| SUSE Linux Enterprise Server 12 SP3 | samba | 4.6.7+git.51.327af8d0a11-3.12.1 |
| SUSE Linux Enterprise Server 12-LTSS | samba | 4.2.4-18.44.2 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | samba | 4.4.2-38.11.2 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | samba | 4.2.4-28.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | samba | 4.2.4-28.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | samba | 4.2.4-28.19.3 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | samba | 4.4.2-38.11.2 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | samba | 4.2.4-28.21.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | samba | 4.6.7+git.51.327af8d0a11-3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | samba | 4.6.9+git.59.c2cff9cea4c-3.17.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | samba | 4.4.2-38.11.2 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | samba | 4.2.4-28.21.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | samba | 4.6.9+git.59.c2cff9cea4c-3.17.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | samba | 4.6.7+git.51.327af8d0a11-3.12.1 |
| SUSE OpenStack Cloud 6 | samba | 4.2.4-28.21.1 |
| SUSE OpenStack Cloud 6 | samba | 4.2.4-28.19.3 |
| Ubuntu 14.04 LTS | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.12 |
| Ubuntu 16.04 LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.11 |
| openSUSE Tumbleweed | samba | 4.14.6+git.182.2205d5224e3-1.1 |